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Abstract ofWO9950992 

A data transmitting/receiving method ensuring a 
high security enhanced by control key update 
and a high transmission/reception efficiency 
enhanced by reducing the numbers of 
authentications and key exchanges. An STB (1) 
transmits encrypted digital data (Kw(D)) 
encrypted from digital data (D) using a work key 
(Kw) and an encrypted work key (Kc(Kw)) 
encrypted from the work key (Kw) using a control 
key (Kc), regularly or irregularly updates the 
control key (Kc), and imparts an identifier (L) for 
identifying the control key (Kc) to every control 
key (Kc). A VTR apparatus (2) decrypts the 
received control key (Kc(Kw)) with the control key 
(Kc) obtained by performing authentication and 
key exchange with the STB1, decrypts the 
received work key (Kw(D)) with the control key 
(Kc(Kw)), obtains the digital data (D), refers to 
the transmitted identifier (L) when it resumes the 
reception after the reception is suspended, 
judges whether or not the control key (Kc) is 
updated while the reception is suspended, 
performs authentication and key exchange again 
if the control key (Kc) is judged to be updated, 
and thus obtains the updated control key (Kc). 
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(57) Abstract 

A data transmitting/receiving method ensuring 
a high security enhanced by control key update and a 
high transmission/reception efficiency enhanced by 
reducing the numbers of authentications and key 
exchanges. An STB (1) transmits encrypted digital 
data (Kw(D)) encrypted from digital data (D) using a 
work key (Kw) and an encrypted work key (Kc(Kw)) 
encrypted from the work key (Kw) using a control key 
(Kc), regularly or irregularly updates the control key 
(Kc), and imparts an identifier (L) for identifying the 
control key (Kc) to every control key (Kc). A VTR 
apparatus (2) decrypts the received control key 
(Kc(Kw)) with the control key (Kc) obtained by 
performing authentication and key exchange with the 
STB1, decrypts the received work key (Kw(D)) with 
the control key (Kc(Kw)), obtains the digital data (D), 
refers to the transmitted identifier (L) when it resumes 
the reception after the reception is suspended, judges 
whether or not the control key (Kc) is updated while 
the reception is suspended, performs authentication 
and key exchange again if the control key (Kc) is 
judged to be updated, and thus obtains the updated 
control key (Kc). 
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